Files
buildroot/package/opensc/opensc.mk
Bernd Kuhls baa0a13653 package/opensc: security bump version to 0.27.1
https://github.com/OpenSC/OpenSC/blob/0.27.1/NEWS

Switched to sha256 tarball hash provided by upstream.

Removed patch which is included in this release.

Fixes the following CVEs:
* CVE-2025-13763: Several uses of potentially uninitialized memory
                  detected by fuzzers
* CVE-2025-49010: Possible write beyond buffer bounds during processing
                  of GET RESPONSE APDU
* CVE-2025-66215: Possible write beyond buffer bounds in oberthur driver
* CVE-2025-66038: Possible read beyond buffer bounds when parsing
                  historical bytes in PIV driver
* CVE-2025-66037: Possible buffer overrun while parsing SPKI

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Marcus Hoffmann <buildroot@bubu1.eu>
2026-04-29 10:36:09 +02:00

31 lines
815 B
Makefile

################################################################################
#
# opensc
#
################################################################################
OPENSC_VERSION = 0.27.1
OPENSC_SITE = https://github.com/OpenSC/OpenSC/releases/download/$(OPENSC_VERSION)
OPENSC_LICENSE = LGPL-2.1+
OPENSC_LICENSE_FILES = COPYING
OPENSC_CPE_ID_VALID = YES
OPENSC_DEPENDENCIES = pcsc-lite
OPENSC_INSTALL_STAGING = YES
OPENSC_CONF_OPTS = --disable-cmocka --disable-strict --disable-tests
ifeq ($(BR2_PACKAGE_OPENSSL),y)
OPENSC_DEPENDENCIES += openssl
OPENSC_CONF_OPTS += --enable-openssl
else
OPENSC_CONF_OPTS += --disable-openssl
endif
ifeq ($(BR2_PACKAGE_ZLIB),y)
OPENSC_DEPENDENCIES += zlib
OPENSC_CONF_OPTS += --enable-zlib
else
OPENSC_CONF_OPTS += --disable-zlib
endif
$(eval $(autotools-package))